fix(deps): bump tree-sitter to 0.26 and set sqlx default-features=false to fix RUSTSEC advisories (#7031)

Signed-off-by: Adrian Cole <adrian@tetrate.io>
2026-02-06 18:39:24 +08:00
parent 2c7e2293b2
commit 81b0a348d6
9 changed files with 242 additions and 262 deletions
@@ -26,6 +26,7 @@ jobs:
        # https://github.com/marketplace/actions/cargo-audit-your-rust-dependencies
      - uses: actions-rust-lang/audit@72c09e02f132669d52284a3323acdb503cfc1a24
        name: Audit Rust Dependencies
-        # with:
-          # Comma separated list of issues to ignore
-          # ignore: RUSTSEC-2020-0036
+        with:
+          # sqlx-mysql pulls in rsa, but goose only uses sqlite. cargo-audit
+          # can't distinguish used from unused deps (rustsec/rustsec#1119).
+          ignore: RUSTSEC-2023-0071